Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/3c9c3c-d608-4ea2-9a28-c11ec6ea86b8/1/zpE13-0LtjNdGd3W1-mfSK--PAE.mft
File: zpE13-0LtjNdGd3W1-mfSK--PAE.mft (raw, json)
Hash identifier: OiJVeSOYEwPgk45ZQDKBdF1TXn933pddZcMbGlPMJYI=
Subject key identifier: 64:35:45:1E:BC:CB:ED:DF:77:B1:86:11:26:64:EA:68:09:C8:5C:7A
Authority key identifier: CE:91:35:DF:ED:0B:B6:33:5D:19:DD:D6:D7:E9:9F:48:AF:BE:3C:01
Certificate issuer: /CN=ce9135dfed0bb6335d19ddd6d7e99f48afbe3c01
Certificate serial: 0194BCA992BF493A64E47912A0A0E302B6CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zpE13-0LtjNdGd3W1-mfSK--PAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/3c9c3c-d608-4ea2-9a28-c11ec6ea86b8/1/zpE13-0LtjNdGd3W1-mfSK--PAE.mft
Manifest number: 1091
Signing time: Fri 31 Jan 2025 14:00:17 +0000
Manifest this update: Fri 31 Jan 2025 14:00:17 +0000
Manifest next update: Sat 01 Feb 2025 14:00:17 +0000
Files and hashes: 1: 3AR-VMpBzAccZOXuS0Wv2igI9_8.roa (hash: 1IjF66OCZHXjj/PGOWfcYm6upWdu1RftdnSFzRH/4xc=)
2: 7f-9IRIqQnjGSRvU0WiDuu7Obc8.roa (hash: OLYbBSTAVUTnC5xo7ur6Zey9nNLImhpgQBUvgb05C6w=)
3: zpE13-0LtjNdGd3W1-mfSK--PAE.crl (hash: i5FyoVrMOWwMSFi0gw8TdAgYbMrre+J2oP1MJG98uYg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:92:bf:49:3a:64:e4:79:12:a0:a0:e3:02:b6:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce9135dfed0bb6335d19ddd6d7e99f48afbe3c01
Validity
Not Before: Jan 31 14:00:17 2025 GMT
Not After : Feb 1 14:00:17 2025 GMT
Subject: CN=6435451ebccbeddf77b186112664ea6809c85c7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c7:dd:b1:10:c1:64:ba:85:5c:f4:1d:07:36:
3a:89:2b:36:1d:e5:c4:34:b4:7c:fc:af:a6:51:c7:
a9:91:36:c6:11:fb:fa:b5:c5:83:d1:b2:26:cc:7c:
4a:39:1a:2f:f4:d3:7c:62:f5:5e:3a:9d:3f:af:75:
c4:b6:f5:3e:cf:be:81:06:68:80:7c:95:76:aa:7c:
22:b0:04:bf:fa:48:fe:10:53:c7:ff:f2:93:b3:0e:
6d:a9:e8:d0:48:08:21:09:d8:d6:2d:3f:34:44:ba:
43:6d:74:44:4e:50:c2:9a:85:8d:89:82:e5:6a:de:
89:41:57:bb:0c:03:dc:5f:32:39:99:72:c9:f6:c8:
52:21:1b:d5:53:0f:e2:e3:11:da:ad:9f:4a:45:68:
36:94:40:41:ff:c6:4d:4b:6c:a0:cb:e0:45:f3:48:
f4:6c:a0:f4:17:b0:4b:e6:5e:a1:cf:e4:8c:91:67:
05:f7:8e:c9:5c:fe:57:6c:96:e5:a2:e1:87:cc:21:
0a:83:36:4f:f3:13:89:6e:d5:e9:4c:96:80:5d:2d:
90:13:e9:a5:68:22:ac:8e:65:57:2e:02:ed:46:8a:
37:33:b2:25:3e:e1:c4:26:5e:42:f6:05:c0:ef:ab:
09:93:9a:c6:a7:f9:eb:44:6f:fc:2e:0e:fa:db:42:
5c:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:35:45:1E:BC:CB:ED:DF:77:B1:86:11:26:64:EA:68:09:C8:5C:7A
X509v3 Authority Key Identifier:
keyid:CE:91:35:DF:ED:0B:B6:33:5D:19:DD:D6:D7:E9:9F:48:AF:BE:3C:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zpE13-0LtjNdGd3W1-mfSK--PAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/3c9c3c-d608-4ea2-9a28-c11ec6ea86b8/1/zpE13-0LtjNdGd3W1-mfSK--PAE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/3c9c3c-d608-4ea2-9a28-c11ec6ea86b8/1/zpE13-0LtjNdGd3W1-mfSK--PAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:e2:1b:30:3e:6d:18:bf:fb:15:95:53:00:88:f1:ea:ae:b3:
7e:64:b1:97:6c:f1:c9:18:bb:06:b0:89:5d:e4:d1:86:c6:8e:
56:63:aa:49:ea:9f:97:19:75:0e:d8:6e:9b:b9:9b:28:90:4e:
ec:97:83:ee:3d:60:3a:c5:be:2f:2d:51:d2:95:4f:3f:ad:55:
f8:31:61:95:30:db:c3:6e:04:de:a3:23:d2:30:29:48:67:65:
31:e0:53:61:45:8a:25:d5:4b:14:85:74:42:55:bc:67:75:bb:
17:2b:5e:ba:b7:f5:8d:2a:08:52:1b:99:67:85:e7:fc:dd:73:
c7:2b:1a:80:4f:4a:a0:8b:43:9b:e7:f5:d7:51:97:7c:ec:73:
46:7c:73:0d:93:39:63:c6:4e:14:08:4c:66:f7:df:44:b7:96:
09:ec:72:4c:5a:1f:e4:90:46:34:5d:21:13:31:bc:43:c7:34:
48:3d:22:ec:4f:18:b2:c9:d7:00:c3:5b:7c:3b:34:da:1c:32:
dc:02:ec:da:9a:09:74:69:6c:49:e8:ca:c1:d6:e1:5d:df:3a:
9e:93:31:96:c5:fc:82:99:60:ce:c0:47:d6:3b:fb:04:b9:8a:
79:06:ae:8b:34:28:3c:de:7b:27:7f:fb:b4:8d:5e:f3:4e:1d:
7c:53:94:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:50 2025 by rpki-client